Signing certificate not included in document download

[joseph]

@gdeflaux the certificate won't be a page. It's part of the pdf's metadata i.e it's embedded inside the pdf. You have to use Adobe Reader to validate. On linux, you can use pdfsig .

[gdeflaux]

Hey. That's the pdfsig output I get:

❯ pdfsig 'etiquettes pays - Google Sheets_signed (1).pdf'
Digital Signature Info of: etiquettes pays - Google Sheets_signed (1).pdf
Signature #1:
  - Signer Certificate Common Name: Akvo
  - Signer full Distinguished Name: E=contact@akvo.org,CN=Akvo,O=Akvo Foundation,L=Amsterdam,ST=Holland,C=NL
  - Signing Time: Jan 07 2025 09:19:17
  - Signing Hash Algorithm: SHA-256
  - Signature Type: adbe.pkcs7.detached
  - Signed Ranges: [0 - 302706], [335480 - 336627]
  - Total document signed
  - Signature Validation: Signature is Valid.
  - Certificate Validation: Certificate issuer isn't Trusted.

Does it look correct?

[joseph]

Yes, that looks correct

[gdeflaux]

Hey. I've tried to reinstall a few times and I still get the same issue: the certificate page is not appended automatically to the signed document (the document is indeed digitally signed and the certificate can be downloaded separately from the audit page).

Is anyone experiencing the same issue? Is that a limitation from the self hosted version of the application?

As a reference, the screenshot below is taken from Documenso hosted version:

Thanks!

[joseph]

FWIW, I can reproduce this. But I don't know what the problem is. The certificate page is attached in the cloud service but not on the selfhosted one.

[gdeflaux]

Hi. Should I file a bug report for this somewhere?

[nebulon]

@gdeflaux that might indeed yes just to get some more info on how it should be

[jdaviescoates]

@nebulon said in Signing certificate not included in document download:

Did you follow the instructions at https://docs.cloudron.io/apps/documenso/#signing-certificate ?

The upstream docs https://docs.documenso.com/developers/self-hosting/signing-certificate mentioned quite a few other variables - perhaps some of the others are needed too?

[girish]

@gdeflaux we have a task internally trying to figure what the issue is.

It seems the issue is that chromium is not installed in the package. We are fixing the package , hopefully that fixes it.

[girish]

@gdeflaux issue created upstream - https://github.com/documenso/documenso/issues/1634

[gdeflaux]

@girish Thanks so much.

[gdeflaux]

I see there's a possible solution posted on the GH issue. Flagging so that maybe you guys can try it. Thanks!

[gdeflaux]

Hey. The solution in the GH issue seems to work. I'd be great if @girish (or someone at Cloudron) could test and push an update if it happens to work.

Thanks!

[nebulon]

I've reopened our internal issue to adjust the package if possible.

[girish]

@gdeflaux Can you check with the latest package? The latest one has sockpuppetbrowser which supposedly fixes the problem.

[gdeflaux]

Hey. I have tried with fresh new install and I still have the same issue. I've confirmed that the setting to append the certificate was ON for the team.

[vladimir.d]

Hi @gdeflaux, I've installed a fresh app, uploaded a pdf file, set a signing form, then signed it. The completed pdf contains Signing Certificate page.
Could you elaborate step by step how to reproduce the issue you are facing with?
Could you try to increase memory allocated for the app in Resources section in the app's configure view and use the slider to set the memory limit and then to try to sign a pdf?

[andirahmat]

It was fixed, but after updated to Documenso 1.12.6, com.documenso.cloudronapp@1.7.1 now new signed documents not included with the certificate at the second page. The old signed docs when i redownload still have the certificate on second page.

[vladimir.d]

@andirahmat How big a document were you trying to sign? Could you try to sign a small pdf just with one page?

I've tried to reproduce the issue but had no luck.
First I installed v1.7.0, the signing certificate page was succesfully generated there, then I updated the app to v1.7.1, and signed a new document - Signing certificate page was attached as well.